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AMENDMENTS TO THE CLAIMS: 
This listing of claims will replace all prior versions, and listings, of claims in the application: 
Listing of Claims: 

^/'(currently amended) A storage devic e, comprising: inoluding 
a trusted clock, 
a memory, 
a time-stamper^ 
an interface, 
a controller, and 
a digital signer* 
wherein 

the controller is configured dovioo boing adapted in uoo to cause otore to ooid memory data* that 
has been received from an outside of said device via said interface, to be time-stamped by said 
time-stamper, with a time obtained from said trusted clock, and digitally signed with a digital 
signature by said digital signe r, and 

the controller is further configured to store the time-stamped and digitally signed data to said 
memory, without transmitting said time-stamped data back to the outside of said device . 

^'(currently amended) A device as claimed in claim l x wherein said memory comprises 
e ith e r - of - tfae - following at least one selected from the group consisting of : a disc, and a tape 
drive. 
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(currently amended) A device as claimed in claim l x wherein said memory is a long term 
storage medium. 
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^^(currently amended) A device as claimed in claim 1 A wherein said memory is a 
removable from th e otorago dovioo storage medium . 



(currently amended) A device as claimed in claim l x wherein said device comprises a 
part of any one of th e following one selected from the group consisting of : a disc drive, a tape 
drive, a disc array, a disc sub-system, a tape library, an optical jukebox, a disaggregated 
storage network, a storage area network, network attached storage. 



(currently amended) A device as claimed in claim 1 A wherein said trusted clock is 
' provided by a replaceable card pluggable adapt e d to be plugg e d into said device. 



/f. (currently amended) A device as claimed in claim l a wherein said trusted clock is an 
encapsulated hardwired component. 



^^(currently amended) A device as claimed in claim 1 . further comprising whoroin thero io a 
Gontrollorywith associated controller logic associated with said controller, said controller logic 
being protected by a trusted mechanism to prevent unauthorized unauthorised and unnotioed 
alteration of said controller logic. 
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( (currently amended) A device as claimed in claim 1 A wherein said devioo has a controller 
is further configured adapt e d to do at least one of the following: 

(i) identify whether the data received via said interface by said dovioe has a flag indicative as a 
command to time-stamp the flagged data, 

fiO identify whether command language used to control operation of said device has a marker 
indicative as a command to time-stamp selected data, and 

£iii}ch.eck whether the time-stamper is set to a time-stamp mode to time-stamp received data, or 
not, Go - set oo aa not to time otamp data not. 
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^^(currently amended) A device as claimed in claim 1* further comprising a clock- 
correcting input adapted to input a trusted correction signal to said trusted clock to correct said 
clock. 



(canceled) 



\$ (currently amended) A storage device as claimed in claim 8. wherein said memory is 
inoluding a tmotod olookj a long term memory d e vio e >atim e Gtampor; a digital oigning - u aiif 
and a control le r with aooooiat e d oontrollor - logio: oaid device bein g- adapt e d^ in uoo^ to otoro to 
ooid memory device data that Iiqo b ee n tim e stamped by said tim e otomp e r with a timo obtained 
from oaid tructod oloolc and digitally cignod with a digital oignaturo by oaid - digital oigning unit, 
and ooid controller logic b e ing prot e ct e d by a truotod moohaniom to pr e v e nt, in us e ; 
unauthorio e d alt e ration of oaid oontrollor logio , 

(currently amended) A storage device , comprising: including 
trusted clock means for non-repudiably measuring time, 
data ctorag e moano for storing data, 

time-stamping means for stamping data with a non-repudiable time supplied by said trusted 
clock means, 

digital signing means for signing data digitally,. 

auoh that oaid data storage means for locally storing ctor e o data that has been time-stamped by 
said time-stamping means and signed with a digital signature by said digital signing means, 
[[in use]] and 

controlling means for prohibiting transmission of said time-stamped data to components other 
than said digital signing means and said data storage means . 
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I. (previously presented) A method of storing secure time-stamped data in a data storage 
device, a trusted clock being at the data storage device, comprising the steps of: ! 

(i) time^stamping data by using the trusted clock at said data storage device; 

(ii) creating a digital signature dependent upon content of said data and time-stamp; and 

(iii) storing said data and the signature associated with said data in said data storage device on a 
recording medium of said data storage device. 



7: (currently amended) A method as claimed in claim 14 , wherein said recording medium 
- where - caid data otorago devic e comprises a long-term data storage medium* and wherein time- 
stamped, signed data are stored on said long-term data storage medium. 



^^(currently amended) A method as claimed in claim 14 4 wherein 

said data storage device comprises a controller [[is]] used to control oporationo steps (i) to (iii), 
and wh e r e in 

said controller is controlled by control, logic, and 

said method further comprises protecting said control logic by a trusted mechanism which 
e noureo that - paid control locio has not b ee n modifi e d from what it should b e to prevent 
unauthorized alteration of said controller logic . 



(currently amended) A method as claimed in claim 14 A further comprising including 
checking data received by said data storage device for a flag indicative of instructions to time- 
stamp all of or a selected part of said data, and said data, or the part of said data, is time 
stamped accordingly. 



18. (currently amended) A method as claimed in claim 14 A further comprising including 
checking a command language of a controller in said data storage device, said 
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controller being used to control steps (i) to fiiiV for instructions to time-stamp all, or a selected 
part, or parts, of said data. 



/ (currently amended) A method as claimed in claim \ A X wherein 

said device comprises ic oontroll e d by a controller which is used to control steps (0 to (iift and 
which has a time-stamp setting in whioh th e timo otamp e r tim e- otompo ooid data and a non 
time-stamping setting in whioh the timo otamp e r dooo not time otomp oaid data, and 

said method further comprises checking in whioh a ohoolc io mado as to the setting of said 
controller prior to said operation fi) tim e ptamping, or not, of r e o e iv e d oaid data. 



V 0 

devre' 



(currently amended) A method of storing secure time-stamped data in a data storage 
e, a trusted clock being at the data storage device, said method comprising the steps of: 



transmitting data to said device over the Internet or other public network: 

time-stamping said data bv using the trusted clock at said data storage device: 

creating a digital signature dependent upon content of said data and time- stamp: and 

storing said data and the signature associated with said data on a recording medium of said data 
storage device, as olaimod in claim 14 comprising tranomitting paid data to said d e vic e ov e r tho 
Int e rn e t or oth e r public n e twork, and tim e stamping and signing said data, and storing said 
tim e otampod signed data, within oaid data - storage devic e w ithout transmitting said sign e d 
time-stamped data back over the Internet or other, public network. 

^24^ (currently amended) A method as claimed in claim 14 A wherein said data that is time- 
stamped is a digest of a larger data record. 



,22. (canceled) 
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2$r (currently amended) A network , comprising having a data storage device adapted to 
tim^stamp and store data that [[it]] said data storage device receives from said network 
without transmitting time-stamped data across said network. 

^S^. (currently amended) A> Software firmware or a computer readable medium comprising 
havmg a program recorded thereupo n, said program when executed bv which, in uoo t oauooo a 
processor of a data storage device running a program causes the processor to execute a process 
including: 

i) time-stamping data bv using a trusted clock at said data storage device; 

ii) creating a digital signature dependent upon content of said data and time-stamp; and 

iii) storing said data and associated said signature on a recording medium of said data storage 
device without transmitting said time-stamped data outside said data storage device . 



^ZSv^canceled) 



\^J[currently amended) A method of storing time-stamped time otomp e r data on a network, 
said method comprising; 

transmitting [[the]] data from a data source connected to said network first, remote, network 
attach e d d e vico to a data storage device also connected to said network the data storage device 
including a trusted clock, a memory, a time-stamper and a digital signer, 

time-stamping and digitally signing the transmitted data at said data storage device using 
otoring in caid memory data that havo boon - timo otompod by said time-stamper, tho Dtorod data 
including a time obtain e d - from said trusted clock and digitally cign e d with a digital signature 
by said digital signer, and 

storing the time-stamped and digitally signed data to said memory, without in tho aboonc e of 
transmitting time-stamped data back to said romoto dovio e for otorage data source via said 
network. 
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27. (new) A device as claimed in claim .8, wherein said controller logic is time-stamped. 

28. (new) A method as claimed in claim 14, wherein 

said data storage device comprises a controller used to control steps (i) to (iii), 
said controller is controlled by control logic, and 

said method further comprises time-stamping the controller logic prior to passing data through 
to the trusted clock. 

29. (new) A method as claimed in claim 14, wherein 

said data storage device comprises a controller used to control steps (i) to (iii), 
said controller is controlled by control logic, and 

said method further comprises checking a signature of the controller logic prior to step (i). 
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